High
CVE-2023-24420
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-28173
Google XML Sitemap for Images <= 2.1.3 - Cross-Site Request Forgery via image_sitemap_generate
High
CVE-2023-28154
webpack JS package <= 5.75.0 - Sandbox Bypass
Medium
CVE-2023-27626
Stock Ticker <= 3.23.0 - Missing Authorization via AJAX actions
Medium
CVE-2023-28171
Brilliance <= 1.3.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-27612
Site Reviews <= 6.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-27625
Site Reviews <= 6.5.1 - Missing Authorization
Medium
CVE-2022-46795
Print Invoice & Delivery Notes for WooCommerce <= 4.7.2 - Cross-Site Request Forgery via ts_reset_tracking_setting
Medium
CVE-2023-25456
Klaviyo <= 3.0.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-1372
WH Testimonials <= 3.0.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-46794
WooCommerce Weight Based Shipping <= 5.4.1 - Cross-Site Request Forgery leading to Plugin Settings Changes
Medium
CVE-2023-1374
Solidres <= 0.9.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-25043
Data Tables Generator by Supsystic <= 1.10.25 - Missing Authorization
Medium
CVE-2022-47180
Kopa Framework <= 1.3.5 - Cross-Site Request Forgery
High
CVE-2023-1124
Shopping Cart & eCommerce Store <= 5.4.2 - Authenticated (Admin+) Local File Inclusion via import_file_url
Medium
CVE-2023-25452
CMS Press <= 0.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-45835
PhonePe Payment Solutions <= 1.0.15 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2023-0820
User Role by BestWebSoft <= 1.6.6 - Cross-Site Request Forgery to Privilege Escalation
Medium
CVE-2023-27619
Regina Lite <= 2.0.7 - Reflected Cross-Site Scripting
Medium
7945110e-2a9d-4e0e-b0e8-77c16694993b
Dynamics 365 Integration <= 1.3.12 - Cross-Site Request Forgery via wp_ajax_wpcrm_log
Medium
CVE-2023-28172
WP Google Map Plugin <= 4.4.2 - Cross-Site Request Forgery via delete()
Medium
CVE-2023-27611
Reusable Blocks Extended <= 0.9 - Cross-Site Request Forgery via reblex_reusable_screen_block_pattern_registration
Medium
CVE-2023-27620
Robo Gallery <= 3.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Medium
CVE-2023-1377
Solidres <= 0.9.4 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.